If users log into the OpenVPN AS web interface using Firefox or IE and login then reboot and go back to the OpenVPN AS web interface using those browsers they are still logged in. Is this intended behavior? It doesn't seem as secure as most would like.